Rated 5 out of 5 stars

by ff@n on Feb. 3, 2010 ·

Nice idea for security conscious users! Biggest irony...I came to know of this addon after following up on this story:
http://lwn.net/Articles/372264/

and then clicking on a bugzilla link:

https://bugzilla.mozilla.org/show_bug.cgi?id=476766#c44

and one more thing...Is this (somewhat) similar to this addon: http://codefromthe70s.org/sslblacklist.aspx

Thanks! Keep up the good work!

This review is for a previous version of the add-on (1.0). 

by Carlo v. Loesch (Developer) on Feb. 6, 2010 ·

Hi there! Thanks. A simple wish for things to be done differently led to a very simple add-on that does things differently. On Bugzilla Gerv says there are several extensions that do this job, but I couldn't find any. SSL Blacklist does a different job: It looks for a specific weakness in old certs and makes your browser check each certificate you bump into with a blacklist hosted at codefromthe70s.org (or you can download it). That's a much harder job than what Patrol does, since an extension can't tell whether a certificate was done with MD5 from Javascript, so that blacklist needs to be maintained externally.
The site states: "MD5 has been all but retired from daily use for years now. You're not very likely to come across an important website with a certificate that has been signed using MD5-RSA. If you do, however, tread carefully."